Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/5TXmmxuwTlINF0eA7_UxKrvM6O8.roa
File: 5TXmmxuwTlINF0eA7_UxKrvM6O8.roa (raw, json)
Hash identifier: iL479TkLSY63HTkRg2zv2S4xzh2Q0/OzWCsz6z5evHc=
Subject key identifier: E5:35:E6:9B:1B:B0:4E:52:0D:17:47:80:EF:F5:31:2A:BB:CC:E8:EF
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 01856F5DC2E39B0B8E595E5E0752CE5E9B62
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/5TXmmxuwTlINF0eA7_UxKrvM6O8.roa
Signing time: Sun 01 Jan 2023 22:04:53 +0000
ROA not before: Sun 01 Jan 2023 22:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60661
IP address blocks: 83.96.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:c2:e3:9b:0b:8e:59:5e:5e:07:52:ce:5e:9b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Jan 1 22:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e535e69b1bb04e520d174780eff5312abbcce8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d4:44:30:fe:60:3c:3f:79:a6:bd:83:aa:2c:
f0:9a:5e:f3:ad:41:cd:82:99:93:02:8e:e8:f8:6c:
d1:a8:d5:00:4c:7a:ac:57:95:82:ff:77:09:c5:c0:
d0:f8:d3:b1:73:7c:b6:ed:c5:e1:e9:ac:28:b0:a5:
a9:91:96:ef:f2:47:bc:85:81:55:86:ee:b1:7f:a5:
c7:12:7b:e6:c8:a7:f0:04:25:f8:7c:3b:5b:36:1b:
80:8e:fc:cd:b6:15:f8:6c:36:7d:0c:0c:36:f6:b9:
fd:82:94:cd:22:ef:1c:38:90:3b:ea:31:60:00:d4:
8f:24:ef:b5:56:32:d6:b9:03:bf:ec:c9:2a:84:51:
65:d4:c7:6f:70:da:57:ae:07:3d:2f:1d:e4:95:1d:
bf:01:1a:ed:5d:08:50:af:8e:76:0c:e6:8d:d5:eb:
85:f4:61:ea:ae:c8:7d:76:60:85:f3:53:46:a9:c2:
fb:fe:6a:04:05:d1:69:55:fe:cb:2e:0e:98:e5:d5:
4c:ad:32:f1:5f:6e:c5:81:30:44:7d:51:66:d6:81:
96:87:1e:23:1e:49:71:7e:bd:f7:fc:5d:3a:c5:92:
19:47:bc:93:91:cf:e7:49:b5:61:af:53:e5:8d:58:
90:93:ff:03:85:ff:b7:b2:b9:34:84:b0:bd:15:aa:
25:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:35:E6:9B:1B:B0:4E:52:0D:17:47:80:EF:F5:31:2A:BB:CC:E8:EF
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/5TXmmxuwTlINF0eA7_UxKrvM6O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.96.31.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ce:a2:c7:31:4f:fa:21:28:4a:52:a6:e3:3c:df:d6:bc:b5:
d2:1c:71:25:88:47:17:29:0c:ab:4c:e4:4e:11:5e:cc:1e:4c:
a7:bc:cd:b3:c6:8d:ca:27:32:8a:1b:9c:0a:81:ef:4e:92:44:
14:80:27:92:38:a4:08:c7:e8:63:e3:8b:16:d8:cd:31:ef:95:
fe:94:07:74:c2:78:2e:2d:ce:a5:0a:6b:15:2e:37:e0:e3:cd:
9d:26:b8:d1:2c:86:f4:95:ad:36:d3:1a:e3:10:d3:bf:c3:bd:
08:80:d9:6a:3d:89:b6:39:cb:22:5a:9f:a4:09:47:52:62:ca:
57:1b:67:81:2e:0d:8e:02:cb:ee:eb:8b:76:35:0d:29:93:5a:
c1:3a:d4:87:5d:03:69:d9:30:d8:e0:74:c0:b1:0b:a8:a4:3e:
7b:95:54:c4:89:ab:12:e1:fd:09:89:fd:13:ee:9c:ee:3a:f1:
17:49:4a:63:c7:10:e8:66:6b:7c:f7:15:98:19:d7:d7:8f:48:
13:d4:c4:85:01:6c:aa:66:d8:0a:af:76:59:d9:8d:99:22:10:
7d:a8:b3:8c:09:94:74:ba:77:e2:85:77:62:ea:3a:3a:bd:52:
ea:87:37:67:e6:97:c0:ea:19:89:b7:5c:51:a9:99:8d:ea:ec:
37:5f:d3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:08 2024 by rpki-client on console-ams.rpki-client.org